Perch Help
menu
close Browse All Contact Us

Integrations

Red Canary

Red Canary Integration Overview

With Perch’s integration to Red Canary, you can store, search, and visualize all threats detected by Red Canary within Perch. You can also let Perch Security Analysts triage threats detected by Red Canary alongside all your data in Perch.

Red Canary Integration Setup

  1. In Perch, navigate to Settings > Red Canary.
  2. Click INSTALL.
  3. Create a shared secret key and enter it in the Shared Secret (Authorization) field. Save this key in a text file to complete the setup in Red Canary.
  4. Copy the webhook URL in a text file.
  5. Click Enable log collection.
  6. Click Save.

Configure the Red Canary Playbook

  1. In Red Canary, navigate to the playbooks you want to send the webhook request to Perch.
  2. Click Add Action.
  3. Navigate to Webhook/API > Invoke Webhook or API > Add to Playbook.
  4. Select POST as the HTTP method.
  5. Enter the URL you copied in step 4.
  6. Select Yes in the Allow Connections to Untrusted Servers field.
  7. Enter Content-Type=application/json in the HTTP Headers field.
  8. Enter Authorization= and the secret key you created in step 3 in the HTTP Headers field.
  9. Select All Attributes as JSON in the Payload drop-down.
  10. Click Save.
  11. Repeat the steps for all the playbooks you want to send data to Perch. Review the Red Canary integration documentation for more information.